Behavioral task
behavioral1
Sample
d94acc2a29273419227c070be66a652e5d074de175d0ec572bf9dee2f833703f.exe
Resource
win7-20240903-en
General
-
Target
d94acc2a29273419227c070be66a652e5d074de175d0ec572bf9dee2f833703f.exe
-
Size
48KB
-
MD5
dfeaafa71cc4f33a546b050aefb83519
-
SHA1
3b34503a035774a83927fb5fc99a060c84e9b9e9
-
SHA256
d94acc2a29273419227c070be66a652e5d074de175d0ec572bf9dee2f833703f
-
SHA512
70c9ea4f9ee001648d85e11c6b6bc316b83c29866b97cb60fe2dc8f0994a721dcc77d9930020e5bbd19cab53a58cdf13c9af8d2f46d8e492d5e8e28d4c6763d4
-
SSDEEP
768:zukaVT3ongoWU2Gjimo2qrInm5FtxsWPIsm3TcSU0bFrBM/WTepY8hUudDHBkSJx:zukaVT3Q+27OHxsfsm3tbBrTIh7HeS5V
Malware Config
Extracted
asyncrat
0.5.8
Default
14.243.221.170:3322
ynBzTukwLg8N
-
delay
3
-
install
true
-
install_file
roIrMC.exe
-
install_folder
%Temp%
Signatures
Files
-
d94acc2a29273419227c070be66a652e5d074de175d0ec572bf9dee2f833703f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ